last executing test programs: 1.538783981s ago: executing program 2 (id=3): r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x8, &(0x7f0000003040)={0xff, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c005af07677d18bc"}}) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000002300)={{r2, r3+10000000}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000010000000000140012800900010076657468000000006e7ef76b0800200001"], 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) 1.269739395s ago: executing program 2 (id=5): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc495, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r5) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) 306.071224ms ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048000}, 0x4080) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0xf, 0xffff}, {}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x20000890) 249.900505ms ago: executing program 3 (id=4): syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x5, 0x141101) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fadvise64(r3, 0xae0, 0x6, 0x5) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) close(r2) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921"], 0x0) mlock2(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary="98"}]}]}, 0x2c}], 0x1}, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r5, 0x5420, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f00000008c0)=""/4096, 0x1000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYRES16], 0x0) 202.042856ms ago: executing program 2 (id=6): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0x2, 0x8a41) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7) 0s ago: executing program 1 (id=2): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="65660fc736b9230200000f320fc5b0040040000f0f10970fe8fa6466baf80cb82cf59b88ef66bafc0cb000eec4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae82ef66bafc0c66ba004066ef66b8296c", 0x6a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000040000000380012800b0001006272696467650000280002800c002300076b"], 0x58}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. [ 80.367369][ T5773] cgroup: Unknown subsys name 'net' [ 80.507217][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.192593][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.782470][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.798121][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.818362][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.828706][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.838280][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.845666][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.898453][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.907129][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.914983][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.923923][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.932356][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.948487][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.968053][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.981582][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.989425][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.998509][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.008521][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.016381][ T5101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.048644][ T5101] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.058422][ T5101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.080002][ T5101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.082995][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.087981][ T5101] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.102125][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.534204][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 84.624109][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 84.653626][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 84.759891][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.767612][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.775436][ T5786] bridge_slave_0: entered allmulticast mode [ 84.782871][ T5786] bridge_slave_0: entered promiscuous mode [ 84.796419][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 84.818695][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.825982][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.834185][ T5786] bridge_slave_1: entered allmulticast mode [ 84.841467][ T5786] bridge_slave_1: entered promiscuous mode [ 84.913319][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.950218][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.957399][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.965064][ T5788] bridge_slave_0: entered allmulticast mode [ 84.972658][ T5788] bridge_slave_0: entered promiscuous mode [ 84.981948][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.028136][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.035308][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.043023][ T5783] bridge_slave_0: entered allmulticast mode [ 85.050252][ T5783] bridge_slave_0: entered promiscuous mode [ 85.057747][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.066011][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.073511][ T5788] bridge_slave_1: entered allmulticast mode [ 85.081448][ T5788] bridge_slave_1: entered promiscuous mode [ 85.117638][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.124862][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.132517][ T5783] bridge_slave_1: entered allmulticast mode [ 85.140186][ T5783] bridge_slave_1: entered promiscuous mode [ 85.163566][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.175949][ T5786] team0: Port device team_slave_0 added [ 85.185318][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.233216][ T5786] team0: Port device team_slave_1 added [ 85.278487][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.303618][ T5788] team0: Port device team_slave_0 added [ 85.326208][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.353807][ T5788] team0: Port device team_slave_1 added [ 85.360142][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.367285][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.375218][ T5791] bridge_slave_0: entered allmulticast mode [ 85.382658][ T5791] bridge_slave_0: entered promiscuous mode [ 85.392465][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.400576][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.407796][ T5791] bridge_slave_1: entered allmulticast mode [ 85.415074][ T5791] bridge_slave_1: entered promiscuous mode [ 85.434566][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.441873][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.467947][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.536774][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.543937][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.570116][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.602260][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.609849][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.635816][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.662772][ T5783] team0: Port device team_slave_0 added [ 85.671922][ T5783] team0: Port device team_slave_1 added [ 85.696790][ T5786] hsr_slave_0: entered promiscuous mode [ 85.703962][ T5786] hsr_slave_1: entered promiscuous mode [ 85.719386][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.726384][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.752792][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.766371][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.779330][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.857677][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.865226][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.891721][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.905113][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.913210][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.939474][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.951000][ T5101] Bluetooth: hci0: command tx timeout [ 85.967419][ T5791] team0: Port device team_slave_0 added [ 86.006432][ T5791] team0: Port device team_slave_1 added [ 86.038039][ T5101] Bluetooth: hci1: command tx timeout [ 86.068757][ T5788] hsr_slave_0: entered promiscuous mode [ 86.075236][ T5788] hsr_slave_1: entered promiscuous mode [ 86.082211][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.090190][ T5788] Cannot create hsr debugfs directory [ 86.107974][ T5101] Bluetooth: hci2: command tx timeout [ 86.142962][ T5783] hsr_slave_0: entered promiscuous mode [ 86.152411][ T5783] hsr_slave_1: entered promiscuous mode [ 86.161871][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.170394][ T5783] Cannot create hsr debugfs directory [ 86.181074][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.188268][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.198639][ T5101] Bluetooth: hci3: command tx timeout [ 86.219751][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.233057][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.240260][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.266353][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.439311][ T5791] hsr_slave_0: entered promiscuous mode [ 86.452818][ T5791] hsr_slave_1: entered promiscuous mode [ 86.459142][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.466714][ T5791] Cannot create hsr debugfs directory [ 86.675818][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.697515][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.708892][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.755340][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.861157][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.874125][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.884455][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.895739][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.072411][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.086764][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.125010][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.142491][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.158064][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.238973][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.283780][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.291169][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.315554][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.331727][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.363785][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.371098][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.392294][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.425111][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.432962][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.582067][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.610602][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.617765][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.651132][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.658352][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.825456][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.904045][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.916221][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.936106][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.943304][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.993894][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.012214][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.019442][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.028775][ T5101] Bluetooth: hci0: command tx timeout [ 88.057031][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.064233][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.108463][ T5101] Bluetooth: hci1: command tx timeout [ 88.135714][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.142919][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.188046][ T5101] Bluetooth: hci2: command tx timeout [ 88.205018][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.268514][ T5101] Bluetooth: hci3: command tx timeout [ 88.395169][ T5783] veth0_vlan: entered promiscuous mode [ 88.428868][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.474827][ T5783] veth1_vlan: entered promiscuous mode [ 88.566230][ T5783] veth0_macvtap: entered promiscuous mode [ 88.614626][ T5783] veth1_macvtap: entered promiscuous mode [ 88.674362][ T5786] veth0_vlan: entered promiscuous mode [ 88.691295][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.719711][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.732389][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.741721][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.752506][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.761468][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.799753][ T5786] veth1_vlan: entered promiscuous mode [ 88.834972][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.872025][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.955235][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.966708][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.984026][ T5788] veth0_vlan: entered promiscuous mode [ 88.998195][ T5786] veth0_macvtap: entered promiscuous mode [ 89.014952][ T5786] veth1_macvtap: entered promiscuous mode [ 89.055674][ T5788] veth1_vlan: entered promiscuous mode [ 89.067373][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.093650][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.112560][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.136227][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.160042][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.201998][ T5791] veth0_vlan: entered promiscuous mode [ 89.215242][ T5788] veth0_macvtap: entered promiscuous mode [ 89.227248][ T5788] veth1_macvtap: entered promiscuous mode [ 89.240866][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.252097][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.264455][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.291382][ T5791] veth1_vlan: entered promiscuous mode [ 89.314064][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.325911][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.335326][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.344359][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.380923][ T5872] i2c i2c-0: Invalid block read size 255 [ 89.385929][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.399495][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.409878][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.420912][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.433304][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.443953][ T5872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 89.483474][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.499898][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.513693][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.531955][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.546948][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.559479][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.569512][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.583013][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.592285][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.654225][ T5791] veth0_macvtap: entered promiscuous mode [ 89.687107][ T5791] veth1_macvtap: entered promiscuous mode [ 89.838353][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.875200][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.893124][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.906493][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.922648][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.933838][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.975663][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.045242][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.061199][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.073466][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.084140][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.094400][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.104954][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.109028][ T5101] Bluetooth: hci0: command tx timeout [ 90.117108][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.148207][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.151131][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.165109][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.165132][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.182212][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.191280][ T5101] Bluetooth: hci1: command tx timeout [ 90.191414][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.235098][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.243663][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.270342][ T5101] Bluetooth: hci2: command tx timeout [ 90.302397][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.310594][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.348380][ T5101] Bluetooth: hci3: command tx timeout [ 90.354211][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.373703][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.472748][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.516722][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.538011][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.568863][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.732801][ T5888] [ 90.735238][ T5888] ================================================ [ 90.741763][ T5888] WARNING: lock held when returning to user space! [ 90.748322][ T5888] syzkaller #0 Not tainted [ 90.752757][ T5888] ------------------------------------------------ [ 90.759310][ T5888] syz.2.6/5888 is leaving the kernel with locks still held! [ 90.766621][ T5888] 1 lock held by syz.2.6/5888: [ 90.771406][ T5888] #0: ffff888020f9c360 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_block_size+0x7c/0x480 [ 90.876056][ T5892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 91.277942][ T5838] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.470394][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 91.520929][ T5889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.531975][ T5889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.028876][ T787] cfg80211: failed to load regulatory.db [ 92.188270][ T5101] Bluetooth: hci0: command tx timeout [ 92.268059][ T5101] Bluetooth: hci1: command tx timeout [ 92.348374][ T5101] Bluetooth: hci2: command tx timeout [ 92.418144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 92.428917][ T5101] Bluetooth: hci3: command tx timeout [ 92.618208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 92.948215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 93.725129][ T5838] usb 4-1: unable to get BOS descriptor or descriptor too short [ 93.737584][ T5838] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 93.745287][ T5838] usb 4-1: can't read configurations, error -71